CVE-2026-6388

A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...

CVE-2026-6388 Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation

A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...

CVE-2026-6388

A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...

PT-2026-33180

A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates ...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: azure-service-operator, dex, weaviate, golangci-lint, kyverno-policy-reporter-kyverno-plugin, task, minio-object-browser, keda, gitsign, spire-server, db-operator, snyk-cli, delve, cert-manager, external-secrets-operator, docker-credential-gcr, migrate, opentofu,...

CVE-2025-59531 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

GHSA-WP4P-9PXH-CGX2 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

GHSA-GPX4-37G2-C8PV vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

GHSA-F9GQ-PRRC-HRHC vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2025-59538 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2025-59537 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: grafana-mimir, flux-kustomize-controller, oauth2-proxy-fips, timestamp-authority-fips, kyverno-notation-aws-fips, knative-kafka-broker, consul-fips, cerbos, peerdb-flow, gatus, seaweedfs-rocksdb-fips, spiffe-helper-fips, grpc-health-probe, task-fips, teleport,...

GHSA-R5FR-RJXR-66JC vulnerabilities

Vulnerabilities for packages: json-server, pelias-api, kibana, opensearch-dashboards-fips, wazuh-dashboard, librechat, tensorflow-cpu-jupyter, jitsucom-jitsu, py3-captum, argo-workflows, gitlab-rails-ce-fips, code-server, langfuse-fips, kubeflow-centraldashboard, langfuse, prism, saf, sqlpad,...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: json-server, pelias-api, kibana, opensearch-dashboards-fips, wazuh-dashboard, librechat, tensorflow-cpu-jupyter, jitsucom-jitsu, py3-captum, argo-workflows, gitlab-rails-ce-fips, code-server, langfuse-fips, kubeflow-centraldashboard, langfuse, prism, saf, sqlpad,...

GHSA-F23M-R3PF-42RH vulnerabilities

Vulnerabilities for packages: json-server, pelias-api, kibana, opensearch-dashboards-fips, wazuh-dashboard, librechat, tensorflow-cpu-jupyter, jitsucom-jitsu, py3-captum, argo-workflows, gitlab-rails-ce-fips, code-server, langfuse-fips, kubeflow-centraldashboard, langfuse, prism, saf, sqlpad,...

CVE-2026-4800 vulnerabilities

Vulnerabilities for packages: json-server, pelias-api, kibana, opensearch-dashboards-fips, wazuh-dashboard, librechat, tensorflow-cpu-jupyter, jitsucom-jitsu, py3-captum, argo-workflows, gitlab-rails-ce-fips, code-server, langfuse-fips, kubeflow-centraldashboard, langfuse, prism, saf, sqlpad,...

GHSA-F23M-R3PF-42RH vulnerabilities

Vulnerabilities for packages: saf, argo-workflows, renovate, kubeflow-katib, kubeflow-pipelines, npm, opensearch-dashboards, prism, sqlpad, json-server, jitsucom-jitsu, vitess, ts-patch, tensorflow-cpu-jupyter, kubeflow-centraldashboard, langfuse, py3-jupyterlab, code-server...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: saf, argo-workflows, renovate, kubeflow-katib, kubeflow-pipelines, npm, opensearch-dashboards, prism, sqlpad, json-server, jitsucom-jitsu, vitess, ts-patch, tensorflow-cpu-jupyter, kubeflow-centraldashboard, langfuse, py3-jupyterlab, code-server...

CVE-2026-4800 vulnerabilities

Vulnerabilities for packages: saf, argo-workflows, renovate, kubeflow-katib, kubeflow-pipelines, npm, opensearch-dashboards, prism, sqlpad, json-server, jitsucom-jitsu, vitess, ts-patch, tensorflow-cpu-jupyter, kubeflow-centraldashboard, langfuse, py3-jupyterlab, code-server...

GHSA-R5FR-RJXR-66JC vulnerabilities

Vulnerabilities for packages: saf, argo-workflows, renovate, kubeflow-katib, kubeflow-pipelines, npm, opensearch-dashboards, prism, sqlpad, json-server, jitsucom-jitsu, vitess, ts-patch, tensorflow-cpu-jupyter, kubeflow-centraldashboard, langfuse, py3-jupyterlab, code-server...